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ATTACHMENT 1 CONTINUED 



Search Wairant for Defendant's home office 
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or twice eyeiy ofher week to attend medical appointments, Areyiew of Medicaid claims data revealed 
that VSCA billed mid received payments from Medicaid for traBsportatioB services provided to M.A, 
from October 7, 2002 to June 2, 2004 in the amount of $12,234.00 for services not rendered 

9. In another example, fromMarch 13, 2002 to December 12, 2003, VSCA billed and " 
received payments m the amount of $12,242 from the Medicaid program for proyiding EM with 
round-trip traBsportation services. On September 3, 2004, EM, was interviewed. EM. stated fliat 
EM. last used a van transportation company approximately three years ago. EM. could not remember 
the name of the company but remembered that the owner/driver resided at the Woodner Apartmoits, 
which is located on 16^ Street, NW, Washington, D.C, EM. described the owner/driyer as a short, 

■ black, male, with a dark complexion, who spoke with an Afiican accent. The address and description 
of the owner/driTer are consistent with tii#: of .AMuber James, EM. also stated that after sigmficaiit 
weight loss and improYemeBts to EM/s health, EM, bo longer needed to rely ob van transportation, 
EM. utilizes the public traaq^ortatioii system (Metro) and has done so for approximately three years« 

10. As stated above, the initial "spot check" of VSCA's claims also revealed that VSCA had 

i, 

been submitting claims asserting they had provided transportation for beneficiaries who had died prior 
to the dates VSCA claimed to have provided them services. Three indiyiduak.(B.B., C,B,, and J.B.) 
were found to be de-ceased prior to the date of ser\dce that VSCA claimed to have transported the 
beneficiaries. VSCA fraudulently billed D.C. Medicaid for these three beneficiaries on 210 claims 
for a total of approximately $6,930, although B.C. Medicaid only paid VSCA for 44 of these claims 
for approximately $ 1 ,452. For example, on March 1 0, 2004, Medicaid recipient J,B. was pronounced 
deceased, according to -fhe Vital Records Department in Washington, D.C. However, VSCA 
submitted 42 clahxis for J^B.^ totaling approximately $1,386, after March 10, 2004, 
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1 1 . Also, VSCA billed D,C Medicaid for a beneficiary pL.,P.) who did not go to any D C 
Medicaid-approved service centei^, LP/s Medicaid number was only found oa VSCA claims and 
not on any other Medicaid-related health care serace reimbursement claims. D.C. Medicaid's policy 
-States that a van transportation coinpaiiy can only be used to transport Medicaid beneficiaries to 
Medicaid-approyed appointments. That is, VSCA could only submit claims for transportatioii 
provided to beBeficiaries who were going to or from appoiBtments with other Medicaid providers, 
e„g., doctors, hospital, physical therapists„ BecaEse this beneficiary's nimiber had not been submitted 
by other providers for reimbBrsement, it is likely this beneficiary did not receive services from other 
providers and therefore did not use VSCA for transportatioH, VSCA billed D.C, Medicaid for L.P. 
OB 499 claims for a total amount of approximately $ 1 5,339. ' 

12. Another check of dates also r^ealed a patters fiuther suggestive of &e amplitude of the 
fraud carried out by VSCA. D.C. Medicaid investigators reviewed claims submitted by VSCA to the 
D,C. Medicaid progmm diiriBg the period Jannaiy 1, 2002 to Jbbc 2, 2004, for specific dates upon ' 
which one would not expect to find significant, if "any, traasportation services provided, i.e«^ 
Christmas Day 2002, New Year's Day 2003, Fourth' of My 2003, and during a 16-iBch SBowstoim 
that imiBobilized the Washington, D.C, Metro area on February 17, 2003 through February 19, 2003, 
For just these six days, VSCA - a provider of Ixansportation for non-emergency medical care - billed 
Medicaid a total of approxmately $3,948 J5^ based upon 133 total transportation service claims, 
LOCATIONS TO BE SEARCHED ANB EVIBENCE TO BE SEIZED 
As stated above, VSCA lists its business address as Apartment B 1235, 3636 1 6^ Street, RW,, 
Washington, D.C. .This address is listed ob VSCA's checking accorait at tlie Bank of .America, and 
is the address listed for the company with D.C Medicaid. This address is also the address visited by 
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D.C. Medicaid reviewers in April 2004, and wherein VSCA's records were found and reYiewed. TMs 
is also James' residence. . . - ■ - ' 

The second location to be searched^ Apartment 207, 3025 15^ Street, N.W.^ Washington^ 
D.C, appears to be the residence of Maiy KhaBgaa, VSCA bank records indicate that Ms, Khangaa 
is paid peiiodically by VSCA. On or about December 15, 2004, Ms. Khangaa gave federal 
inYestigators a business card that stated she was the office manager for VSCA. The iiiYestigators 
called the VSCA nuiiiber and spoke with Ms. Khangaa by phone. The circumstances of the phone 
call (as' well as a subsequent phone call and a ¥isit to her residence several hours later by the 
inyestigators) iadicsted that Ms. Kliaiigaa was speaidng to the iiiYestigators from her residence. She 
told myestigators that she could transcribe all of the relevant information they would provide over 
the phone and then she could obtain Me^Qaid transportation authority through her computer there ' 
(where she was speaking from). When the investigators later spoke-with her at the entrance to her 
residence, she retrieved three VSCA business cards from her residence, two of which she indicated 
were for her drivers mid the third card was hers, which identified.her as VSCA's Office Manager. 
She made statemcHts to investigators that the VSCA business for which she worked was associated 
with that residence. Within miantes of leaving her aparfmeiit, the investigators called the VSCA 
nuniber again^ and Ms. Khangaa answered ~ 'confiiming that she was workiug from her resideBce. ■ 
Based on my knowledge, trainiBg and experience, Medicaid Providers such as VSCA, who 
conduct business from their residences, also maiataiJi the books and records at tiiose locations. 
Additionally, biisinesses that receive reiiBbnrsements from Medicaid are required to maintain business 
records for 6 years in order^ among other re^OBS, to provide support for revenue and expense 
transactions if questioned by Medicaid auditors, fritemal RevcBue Service exatniners^ or other 
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auditors^ at a later date* Such businesses often use electromc eqiiipment such as computers, facsimile 
machines^ pagers, and telephone answering machlBes to geBerate, trmsfer, count, record and/or store 
infoimation pertaiBing to the claims or financial traBsactions in which they are involYed, especially 
when the business is reqiiired to maintaiB records to support its Medicaid claims. 

Based on my knowledge, traiaiBg, and ^xpericBce, your affiant believes that Medicaid 
providers commonly maintaiB addresses or telephone numbers in boofa, papain, and/or computers 
which reflect names, addresses aBd/or telephone numbers of Medicaid recipients^ as well as other 
indiYidiials who may be ^sociates in their fraudulent schemes, as well as various biisiBCss records 
evidencing such schemes. These materiais are generally kept in the locations from which the business 
operates; ib this case, Mr, Jamas' and Ms, Khaiigaa's residences. 

ILEC^f ROMC EVIBENCE 
Your affiant knows 'that computer' hardware, software, docimieBtatioii^ passwords, and data 
secmity devices may be important to a criiaiiial investigation in two distinct and important aspects: 
(a) the objects themselves maybe iostrumentalities, fruits, or evidence of crime, and/or (b) the objects 
may have becB nsed to collect and store infomiatioB about crimes (in the form of electromc data). 
Rule 41 of the Federal Rules ^f Criminal Procedure permits the govemment to search and seize 
computer hardware, software, dociHBentatioB, passwords, and data security devices which are 
instnimentahties, fruits, or evidence of crime, or storage devices for information about crime. 

Based upon the facts set forth above^ there is probable cause to believe that computer 
hardware^ software, related dociimentatioB, passwords, data security devices (as described below)^ 
aad data found at the busioess/resideHce of VSCA and James^ were integral tools of these crimes and 
constitute the means of committiBg it. As such, they are instramentaHties and evidence of the 
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Yiolations desigaatei Riil€41 ofthe Federal Riiles of CiimBdProcediireaB&omeste 

to seize and retak evidence and iastnmeatalities of a crime for a reasonable time, and to examine 

analyze^ and test ttiem. 

Hgdw^e: Computer hardware consists of all equipment which can receive, capture, collect, 
mnlyze, create, display, convert, store, conceal, or transmit electronic, magnetic, or similar computer 
impiilses or data. Hardware includes, but is Bot' liimted to, any data-processing devices (such. as 
ceBtral processiBg units); interna! aad peripheral storage devices (such as fixed disks, external hard 
disks, floppy disk drives and diskettes, and other memory storage devices); peripheral input/output 
devices (such as keyboards, printers, video display monitors, and related eommunications devices 
(such as cables and connections), as well as any devices, mechanisms, or parts that can be used to 
restrict access to computer hardware (sii^^as ph3^ioal keys and locks). 

Software: Computer software is digital information that can be iBtexpreted by a computer and 
any of its related compoEents to direct the .way Ihey work. Software is stored in electronic, magnetic, 
or other digital forai, iBcfcdkg zip drives. It cosimonly includes progmms to .run operating systems, 
appKcations (like tax preparation, woid-processiBg, or spreadsheet programs), aad iitihties. 

D^gmCTtotion: Computer-related documentation consists of written, recorded, printed, or 
electronically stored material which explains or illustrates how to configure or .use computer 
hardware, software, or other related items. 

Passwords and Data Security Devices : Computer passwords and other data security devices' 
are designed to restrict access to or hide computer software, docMBCBtation, or other programniirig 
code. A password (a striiig of alphaimmeric characters) usually operates a sort of digital key to unlock 
particular data security devices. Data security hardware may include mciyption devices, chips, and 
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circuit boards. Data security software or diptal code may include prograjraning code that creates test 
keys or hot keys, which perform certapi preset geciiiity fimctioBS wheB touched. Data security 
software or code may also eacrypt, compress, hide^ or booby-trap protected data to make it 
inaccessible or ■imiisable^ as m^ell as reverse the process to restore it. - - * 

■ Based upon my knowledge^ traiimg and experience, and consultations with computer 
specialists from the Department of Health and Human Seryices, your affiant knows that searching and 
seizing information from computers aknost always requires agents to seize most or all electronic 
storage devices (along with related peripherals , as discussed below) to be searched later by a qualified 
coMpEter exprt in a laboratory or other controlled environmeiit. This is true because of the following: 

Volume of Evidence : Computer storage devices (like hard disks, and diskettes) can store 
the equivalent of thousands of pages <4 infomiation. Additionally, a suspect may try to conceal 
criminal evidence; he or she might store it in random order with deceptive file names. This may 
require searching authorities to exaioine all the stored data to detenmne which particular fries are 
evidence or insfnimentalities of crime. This sorting process caa take weeks or months^ depending on 
the volume of data stored, and it would be .impractical to attempt this kind of data search on site. 

Technical Reauirenients : Searching computer systems for crimiBal evidence is a highly 
technical process reqiiiring expert skill and a properlyxoBtroUed environment.^ The vast airay of 
computer hardware md scftware available requires men computer experts to specialize in some 
systems and applications, so it is difficult to know before a search which expert is qualified to analyze 
the s>^tem and its data. However, data search protocols are exacting scientific procedures desigaed 
to protect the integrity of the evidence and to recover even hidden, erased, compressed, password- 
protected^ or encrypted files. 
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Based upon my knowledge, traiiiing and experioBce and consultations witii forensic computer 
examiiiers, your- affiant ksows that searcMng computerized infomiatioii for evidence- or 
iBStaimentaEties of crime commonly requiies agents to seise most or all of a computer system^s 
' input/output peripheral devices, related software, documeBtation^ and data security devices (including 
passwords) so that a qualified computer expert can accurately retrieve the system^S'datain a laboratory 
or oflier controlled enyironiBeBt, TMs is true because of the following. 

The peripheral devices which allow users to enter or retrieve data from the storage devices 
vary widely in tiieir compatibifity with other hardware and software. Many system storage devices 
require particular input/output (or ''FC) devices in order to read the data on the system. It is 
importaat that the analyst be able to properly reconfigure the system as it now operates in order to 
accurately retrieve the evidence listed a^ove. In additioB, flie analyst needs the relevant s^em 
software (operatiug systeias^ interfaces^ aud hardware drivers) and any apphcations software^ which 
may have beea used to create the data (whether stored on hard drives or on externa! media), as well 
as all related iiistmctioii manuals or other docnjnentatioB and data security devices. 

If, after inspectiiig the FO devices, software, documentatioB, and data security devices, the 
aiialpt detenoiBes that these items are no longer necessary to retrieve and preserve the data evidence, 
the goveroment will return, them within a reasonable time, : 

Data analysts may use several different techniques to search electronic data for evidence or 
iBStruoieBtalties of crime. These iiiclude^^ but are not limited to, the following: exainiBiBg ffle 
directories and subdirectories for the lists of files they contain; openiug or reading the first few pages 
of selected files to determine their coiiteuts; scauning for deleted or hidden data; searching for key 
words or phrases ("string searches"). 
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This specifically excludes a search of any Mud of imopened electronic mail, and no wairant 
is herein sought for such utiopeHed electronic mail If unopened electronic mail is to be searched, a 
separate waxraat will be sought supported by probable cause. 

Based on the foregoing infoimation and upon my knowledge, training and experience in the 
investigation of health care fraud, your affiant beieyes that fruits and evidence of the commission of 
a Climinal offense, as described below in Schedule B, will be found at the premises listed md 
described below in Schedule A, and therefore, a search warraiit should be issued for Apartment 
B1235, 3636 16^ Steet, MM., WashingtOB, D,C,, and Apartment 207, 3025 15^ Street, RW., 
Washington, B.C. 

WHEREFORE, your affiant believes based on the information provided that probable cause 
exists-for search, and seizure waxrante to^e issued for the above identified and described locations, 
for evidence of vioktioas of Title 1 8 United States Code Sections 1 347 (Healdi C^e Fraud) and 1341 
(Mail Fraud). 



Elton Malone 
Special Agent 



Subscribed as sworn to before me this 



I § DEC 2004 
_ day of 



^ 2004, at Washingtoii, B.C. 



United States Magistrate Judge 

John Ivl Facciola 
U.S. Magistrate Indge 
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SCHEDULE A 

The address of the first location to be searched is Apartment B1235, 3636 16* Street, N.W., 
Washington, B.C. Apartment B 1235 is located on the twelfth {12*) floor of B tower. The entrance 

door to that apartmeHt is blue and the Humber plate B 1235 is a£Bxed on the door. 



The address of the secoad location to be searched is Apaitmeot 207, 3025 15* Street, N.W., 
WasMngton, D.C. Apartment 207 is located on the second floor, and the entrance door to that, 
apartment is white and the number 207 is affixed on the door. 
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SCHEDULE B 



Hie following items are to be seized: 

■ L Daily pick-Bp sheets, ¥eMcle ran sheets, any infomiation ideBtifyiHg clent transport 

and/or medical coBdition. 

2. Al eoBtraets with aay and al hospitals^ clinics^ nuiBiiig homes, ratiremeBt 
communities, group homes and dialysis ceBters for proyiding non-emergency 
traiisportatioiilo Medicaid recipients, 

3. All standing ordeo as ordered by First Health or ACS. 

4. All maHBals^ corre^OBdence, Ixaining materials or any other documoitatioii related to 
poHeies mid practices iiiTolTOig internal MemoraBdiHiis or otherwise regarding 
Tao^rtaaoa services. *, 

V . . . 

5. . All pei^oBiiel files and records sufficient to identify former and cmimA employees or 

contractors associated with VSCA, iiicluding date of birth, job title^ and d^criptioB^ 
dates and scheduled hoii^ of emplo^iien^ and home addresses and telq^hone 
niimbers. . 

6. ■ Documeiits relating to flie interpretatioH, prq)aration, or snbmissioii of healthcare 

claims^ claim forms, bilHng iBstaictions, coding iiisfnictions^ and explanation of 
benefit forms. Records, correspondence^ reference materials, and any other materials 
provided, produced, or genemted by contract carriers relating to billing codes, billing 
procedures^ handliBg of claims mid types of coyerage provided. 

7. .All business records and client documents, including but not limited to^ insurance 
claim foims, receipts, appointmeat books/calendars, telq>hoiie message logs and any 
corre^ondence to and from VSCA or James in his capacity as VSCA's principle, or 
Khaagaa in her capacity as VSCA's Office Manager. Any mail matter or documeiits 
identifyiiig YSCA, James or Khanga as the occupants of the locations tabe searched, 

8. All records relating to access numbers, storage facihty rental agreements and/or 
contracts, keys to storage lockers or other storage-type facihties, or U.S. mail . 
depository access keys, 
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9. All business md persona! business financial records rfatkg to business transactions, 
including but not limited to business and personal checks, cheddng, savings and other 
financial institution account statements^ credit/fiiianoiBg applications and statements^ 
credit identificatioiis, account numbers, iny^tmeEts and purchase records for suppli^, 

automobiles, and eqiiipmrnt 

10. Electronic equipmeBt, such as computeiB, compEter hardware, telex macMnes^ 
facsimile macHaes, cmxeiicy coiHiting machiBes^ telephoBO answeriiig machiii^, and 
related maaimls used to generate, transfer, count, record and/or stoj^ flie^informatioii 
described in this Schedule. AdditioBally, computer software, related docmneBtatioii^ . . 
passwords, data security deyices^ tapes and discs^ audio tapes^ and the data and 
contents (herein, coHtaining the informatioii generated by the aforementioiied 
electronic equipmeiit 

a 

1 1 . Cellular telephones{s) and /or portable cellular telepliones(s), and any stored electronic 

commiinicatioBS contaiiied fherein. 



) 
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